Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Disable imageDigest support in ztunnel controller #582

Open
wants to merge 2 commits into
base: main
Choose a base branch
from

Conversation

sridhargaddam
Copy link
Contributor

@sridhargaddam sridhargaddam commented Jan 23, 2025

Currently, we have some pending work with the ztunnel images that are used as imageDigests. Because of this, when deploying Ambient profile using the OSSM operator, the ztunnel pod fails to come up. This PR temporarily disables this functionality until proper support is implemented.

Alternatives:

  1. Default Image: If image details are not provided in the ZTunnel CR, the operator will use the default image from the helm chart.
  2. Explicitly specify image details: Following a recent fix in the ztunnel controller (PR#568), users can specify image details within the ztunnel CR itself in one of the following ways.
    2.1: ztunnel.spec.values.ztunnel.image
    2.2: ztunnel.spec.values.global.hub/tag

Note: This change impacts on the Ztunnel image when using the Ambient profile and will not have any affect on other images.

Fixes: #581

@sridhargaddam sridhargaddam requested a review from a team as a code owner January 23, 2025 12:29
Currently, we have some pending work with the ztunnel images that
are used as imageDigests. Because of this, when deploying Ambient
profile using the OSSM operator, the ztunnel pod fails to come up.
This PR temporarily disables this functionality until proper support
is implemented.

Alternatives:
1. Default Image: If no image details are provided in the ZTunnel CR,
   the operator will use the default image from the helm chart.
2. Explicitly specify image details: Following a recent fix in the
   ztunnel controller (PR#568), users can specify image details within
   the ztunnel CR itself in one of the following ways.
   2.1: ztunnel.spec.values.ztunnel.image
   2.2: ztunnel.spec.values.global.hub/tag

Fixes: istio-ecosystem#581
Signed-off-by: Sridhar Gaddam <[email protected]>
Copy link

codecov bot commented Jan 23, 2025

Codecov Report

Attention: Patch coverage is 0% with 9 lines in your changes missing coverage. Please review.

Project coverage is 74.42%. Comparing base (6f59106) to head (aa2ba2b).

Files with missing lines Patch % Lines
controllers/ztunnel/ztunnel_controller.go 0.00% 9 Missing ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##             main     #582      +/-   ##
==========================================
- Coverage   75.11%   74.42%   -0.70%     
==========================================
  Files          40       40              
  Lines        2504     2510       +6     
==========================================
- Hits         1881     1868      -13     
- Misses        534      554      +20     
+ Partials       89       88       -1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@nyechiel
Copy link

It is important to note that this only impacts the Ambient profile, and not any usage of non-Ambient mode.

Signed-off-by: Sridhar Gaddam <[email protected]>
@istio-testing
Copy link
Collaborator

@sridhargaddam: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
scorecard_sail-operator_main aa2ba2b link true /test scorecard

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Disable imageDigest support using annotations in ztunnel controller
4 participants